CVE-2013-6892

WebSVN 2.3.3 - Authenticated Arbitrary File Read via Symlink Attack

Title source: llm
STIX 2.1

Description

WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit.

References (3)

Core 3
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/62233
Issue Tracking, Third Party Advisory x_refsource_misc
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775682
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2015/dsa-3137

Scores

EPSS 0.0096
EPSS Percentile 57.2%

Details

CWE
CWE-200
Status published
Products (2)
debian/debian_linux 7.0
websvn/websvn 2.3.3
Published Jan 21, 2015
Tracked Since Feb 18, 2026